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IN THE CLAIMS 



1-15. (canceled) 



16. (new) A method, including steps of 

at a first node in a network, distributing digital content to a second node 
in that network, that digital content representing at least a portion of a media stream, 
at least a portion of that digital content being encrypted by a first encryption key those 
steps of distributing to a second node including steps of 

(a) receiving a first decryption key, that first decryption key being en- 
crypted by a second encryption key, that second encryption key being pre-assigned to 
that first node; 

(b) decrypting that first decryption key using a second decryption key as- 
sociated with that second encryption key, that second decryption key being pre- 
assigned to that first node; 

(c) decrypting that digital content using that first decryption key; 

(d) re-encrypting at least a portion of that digital content using a re- 
encryption key. 



17. (new) A method as in claim 16, including steps of 
by a user of that digital content, receiving a decryption key associated 
with that re-encryption key. 



18. (new) A method as in claim 16, including steps of 
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receiving at least one of (a) that re-encryption key, (b) a decryption key 
associated with that re-encryption key, at a server having access to that first decryp- 
tion key. 

19. (new) A method as in claim 16, including steps of 

receiving that re-encryption key from a server having access to that first 
decryption key. 

20. (new) A method as in claim 16, wherein 

at least one pair of: that first encryption key and that first decryption 
key, that second encryption key and that second decryption key, that re-encryption 
key and a decryption key associated with that re-encryption key, 

include associated keys in a public-key cryptosystem. 

21. (new) A method as in claim 16, wherein 

at least one pair of: that first encryption key and that first decryption 
key, that second encryption key and that second decryption key, that re-encryption 
key and a decryption key associated with that re-encryption key, 

include associated keys in a symmetric-key cryptosystem. 

22. (new) A method as in claim 16, wherein 
that second node includes one or more of: 

a node in that network capable of performing those steps of distributing 
that digital content, 

a recipient user, 
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a presentation device. 

23. (new) A method as in claim 16, wherein 

that re-encryption key is responsive to information from that first node. 

24. (new) A method as in claim 16, including steps of renewing or re- 
voking a license associated with that media stream. 

25. (new) A method as in claim 16, wherein 

at least one of: (a) that first decryption key, (b) a decryption key associ- 
ated with that re-encryption key 

is associated with a set of restrictions on a license to that digital content. 

26. (new) A method as in claim 25, wherein 
those licensing restrictions include at least one of: 

a first date or time at which presentation is allowed for that media 

stream; 

a last date or time at which presentation is allowed for that media 

stream; 

a limited number of presentations allowed for that media stream; 

a limited physical region at which presentation is allowed for that media 

stream; 

a charge, cost, fee, or subscription associated with allowing presentation 
of that media stream; 

a type of presentation device; 
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an output format for a presentation device; 
a set of specific presentation devices; 

a bit rate, sampling rate, or other measure of granularity or precision for 
a presentation device. 



27. (new) A method as in claim 16, wherein 

a decryption key associated with that re-encryption key is pre-assigned 
to at least one of: 

that second node, 

a user of that digital content, 

a presentation device associated with a user of that digital content. 



28. (new) A method as in claim 16, wherein steps of distributing digi- 
tal content to 

at least one of: (a) that first node, (b) that second node, (c) a user node 
include reading at least a portion of that digital content from physical 



29. (new) A method as in claim 16, wherein 
that digital content includes at least one of: 
metadata about that media stream; 

some information capable of inspection by a user other than for presen- 
tation of that media stream. 



30. (new) A method as in claim 16, including steps of 
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delivering, to a user of that digital content, that digital content in a form 
being locked against inspection or tampering by that user; 

separately delivering, to that user, a license including a content key ca- 
pable of unlocking that digital content, that content key being locked against inspec- 
tion or tampering by devices other than a selected presentation device owned by that 
user; 

wherein the selected presentation device is associated with a presenta- 
tion device key, a secure portion of the presentation device being capable of unlocking 
that license using that presentation device key; 

with the effect that presentation of that digital content is restricted to 
that selected presentation device. 

31. (new) A method as in claim 16, including steps of, at a license 

server 

receiving an indication of distribution of that digital content; 

initiating delivery of that first decryption key to that first node; 

separately initiating delivery of a license for that digital content, that li- 
cense including a content key capable of unlocking that digital content; 

wherein that license is delivered in time to at least one of (a) a user of 
that digital content, (b) a device for presenting that digital content, or (c) a node in that 
network. 

32. (new) Apparatus including 
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a physical medium maintaining digital content representing at least a 
portion of a media stream, at least a portion of that digital content being encrypted by 
a first encryption key; 

a physical medium maintaining a first decryption key, that first decryp- 
tion key being encrypted by a second encryption key, that second encryption key being 
pre-assigned to that apparatus; 

a key decryption element coupled to that first decryption key, that key 
decrypting element having access to a second decryption key associated with that sec- 
ond encryption key, that second decryption key being pre-assigned to that apparatus; 

a content decryption element coupled to that digital content and to that 
first decryption key; 

a content re-encryption element coupled to at least a portion of that digi- 
tal content and to a re-encryption key. 

33. (new) Apparatus as in claim 32, including 
an output port coupleable to a network; 

a sending element coupled to that output port and being disposed to 
send, to an intended user of that digital content, information from which that intended 
user can use a decryption key associated with that re-encryption key. 

34. (new) Apparatus as in claim 32, including 
an output port coupleable to a network; 

a sending element coupled to (a) that output port, (b) a physical medium 
maintaining a message directed to a server associated with that digital content or with 
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rights to that digital content, and (c) information from which that intended server can 
grant access to a decryption key associated with that re-encryption key. 

35. (new) Apparatus as in claim 32, including 
an input port coupleable to a network; 

a receiving element coupled to that input port and being disposed to re- 
ceive that re-encryption key from a device having access to that first decryption key. 

36. (new) Apparatus as in claim 32, wherein 

at least one pair of: that first encryption key and that first decryption 
key, that second encryption key and that second decryption key, that re-encryption 
key and a decryption key associated with that re-encryption key, 

include associated keys in a public-key cryptosystem. 

37. (new) Apparatus as in claim 32, wherein 

at least one pair of: that first encryption key and that first decryption 
key, that second encryption key and that second decryption key, that re-encryption 
key and a decryption key associated with that re-encryption key, 

include associated keys in a symmetric-key cryptosystem. 

38. (new) Apparatus as in claim 32, including 
an output port coupleable to a network; 

a sending element coupled to (a) that output port, (b) that content re- 
encryption element, and (c) a physical medium maintaining a message directed to one 
or more of 
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a node in that network capable of distributing that digital content, 

a recipient user, 

a presentation device. 

39. (new) Apparatus as in claim 32, wherein 

that re-encryption key is responsive to information from that apparatus. 

40. (new) Apparatus as in claim 32, wherein 

at least one of: (a) that first decryption key, (b) a decryption key associ- 
ated with that re-encryption key 

is associated with a set of restrictions on a license to that digital content. 

41. (new) Apparatus as in claim 40, wherein 
those licensing restrictions include at least one of: 

a first date or time at which presentation is allowed for that media 

stream; 

a last date or time at which presentation is allowed for that media 

stream; 

a limited number of presentations allowed for that media stream; 

a limited physical region at which presentation is allowed for that media 

stream; 

a charge, cost, fee, or subscription associated with allowing presentation 
of that media stream; 

a type of presentation device; 

an output format for a presentation device; 
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a set of specific presentation devices; 

a bit rate, sampling rate, or other measure of granularity or precision for 
a presentation device. 



42. (new) Apparatus as in claim 32, wherein 

a decryption key associated with that re-encryption key is pre-assigned 
to at least one of: 

that second node, 

a user of that digital content, 

a presentation device associated with a user of that digital content. 



43. (new) Apparatus as in claim 32, including 

a device driver for a second physical medium, that second physical me- 
dium maintaining at least a portion of that digital content. 



44. (new) Apparatus as in claim 32, wherein 
that digital content includes at least one of: 
metadata about that media stream; 

some information capable of inspection by a user other than for presen- 
tation of that media stream. 



45. (new) Apparatus as in claim 32, including 

an output port coupleable to a network to which a user of that digital 
content is coupled; 
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a software element coupled to (a) that output port, (b) that content re- 
encryption element, and (c) a physical medium maintaining a message to that user; 
wherein 

that user is capable of separately retrieving from a device coupled to that 
network, a license including information granting access to a decryption key associ- 
ated with that re-encryption key; 

that license is associated with a selected presentation device owned by 

that user; 

the selected presentation device is associated with a presentation device 
key, a secure portion of the presentation device being capable of unlocking that license 
using that presentation device key; 

with the effect that presentation of that digital content is restricted to 
that selected presentation device. 

46. (new) Apparatus as in claim 32, including 
an input port coupleable to a network; 

a receiving element coupled to that input port, being disposed to receive 
an indication of distribution of that digital content, and being disposed to receive that 
first decryption key; 

an output port coupleable to that network; 

a sending element coupled to (a) that output port, (b) a physical medium 
maintaining a first message, that first message including information sufficient to ac- 
cess that decryption key associated with that re-encryption key, and (c) a physical me- 
dium maintaining a second message, that second message including information suf- 
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ficient to access a license for that digital content, that license including a content key 
capable of unlocking that digital content; 

wherein that license is delivered in time to at least one of: a user of that 
digital content, a device for presenting that digital content, or a node in that network. 

47. (new) Apparatus including 

an input port coupleable to a network; 

a receiving element coupled to that input port, being disposed to receive 
an indication of distribution of digital content representing at least a portion of a me- 
dia stream, at least a portion of that digital content being encrypted; 

an output port coupleable to that network; 

a sending element coupled to (a) that output port, (b) a physical medium 
maintaining a message including information sufficient to decrypt that digital content, 
(c) a physical medium maintaining a message including information sufficient to re- 
encrypt that digital content, and (d) a physical medium maintaining a separate mes- 
sage including information sufficient to access a license for that digital content, that 
license including a content key capable of unlocking that digital content; 

wherein that license is delivered in time to at least one of: a user of that 
digital content, a device for presenting that digital content, or a node in that network. 

48. (new) A physical medium maintaining instructions interpretable 
by a computing device at a first node in a network, those instructions being disposed 
to direct that computing device to 
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distribute digital content to a second node in that network, that digital 
content representing at least a portion of a media stream, at least a portion of that 
digital content being encrypted by a first encryption key; 

those instructions to distribute including instructions disposed to direct 
that computing device to 

(a) receive a first decryption key, that first decryption key being encrypted 
by a second encryption key, that second encryption key being pre-assigned to that 
first node; 

(b) decrypt that first decryption key using a second decryption key asso- 
ciated with that second encryption key, that second decryption key being pre-assigned 
to that first node; 

(c) decrypt that digital content using that first decryption key; 

(d) re-encrypt at least a portion of that digital content using a re- 
encryption key. 



/ / / 
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